Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2a7MK6B8MlpVFSg6K9MhfMkV5yk.roa
File: 2a7MK6B8MlpVFSg6K9MhfMkV5yk.roa (raw, json)
Hash identifier: HSyQRWCOYqEup7PAI/fTqDqEHZnjmXrkOT/UG+2v1Wk=
Subject key identifier: D9:AE:CC:2B:A0:7C:32:5A:55:15:28:3A:2B:D3:21:7C:C9:15:E7:29
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019C4C47B3251BE19E9324F8C9B219E54089
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2a7MK6B8MlpVFSg6K9MhfMkV5yk.roa
Signing time: Wed 11 Feb 2026 10:38:13 +0000
ROA not before: Wed 11 Feb 2026 10:38:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a13:c441::/32 maxlen: 32
2a14:1100::/32 maxlen: 32
2a14:1101::/32 maxlen: 32
2a14:1102::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
2a14:1104::/32 maxlen: 32
2a14:1105::/32 maxlen: 32
2a14:1106::/32 maxlen: 32
2a14:1107::/32 maxlen: 32
2a14:62c0::/29 maxlen: 29
2a14:6a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Feb 2026 15:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:47:b3:25:1b:e1:9e:93:24:f8:c9:b2:19:e5:40:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Feb 11 10:38:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9aecc2ba07c325a5515283a2bd3217cc915e729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:1b:96:1b:09:51:f5:f6:9a:41:37:3a:5f:
a8:e0:46:9d:bf:ba:f9:6d:dd:13:90:41:ba:55:9b:
6c:79:1e:01:f8:b5:14:c3:86:49:47:11:f5:fb:24:
c2:97:3c:ce:b2:83:8c:18:20:d8:7b:07:7f:a7:42:
97:c2:13:ab:fe:b0:67:1f:a9:69:f3:94:f9:66:c1:
7c:12:4b:4a:3e:9a:12:e0:1a:b7:b4:fc:16:46:9f:
f2:93:a6:d2:88:dd:4c:41:08:13:d4:eb:20:f6:47:
ae:fe:b3:44:db:92:58:6d:91:50:72:a2:d9:7e:f6:
e4:11:fd:0b:b2:85:4b:0b:c1:34:a3:ab:12:fa:5b:
7a:da:22:82:d7:2f:60:56:f0:c4:8a:56:0d:1f:72:
25:14:06:aa:1c:c4:04:d8:d4:6e:f5:dd:d0:87:ed:
73:4c:52:b5:92:83:6b:19:58:aa:92:c4:aa:ef:66:
5d:69:40:59:31:d4:2c:de:25:97:03:e8:59:a2:10:
56:ea:20:f7:88:ee:94:d3:f2:e2:f0:2b:ae:51:4d:
ec:20:ec:a7:d7:d0:23:09:8d:4f:ef:00:e7:ea:a4:
d1:ae:93:43:87:bf:97:46:fc:2a:f4:93:bc:58:07:
8c:64:53:2b:69:05:63:b8:5b:f0:af:b2:73:62:bc:
32:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:AE:CC:2B:A0:7C:32:5A:55:15:28:3A:2B:D3:21:7C:C9:15:E7:29
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/2a7MK6B8MlpVFSg6K9MhfMkV5yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a10:3f80::/29
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a13:c441::/32
2a14:1100::/29
2a14:62c0::/29
2a14:6a40::/32
Signature Algorithm: sha256WithRSAEncryption
84:91:c2:f1:16:ab:61:e0:a5:7b:96:fe:a3:d6:d4:62:2f:07:
d5:4d:cf:29:ce:3f:42:b3:18:0f:9f:17:45:fa:05:de:48:39:
e6:80:28:00:81:a7:2c:64:f2:14:69:00:54:de:9e:36:83:6a:
ef:2c:b4:72:c0:00:cb:89:39:c9:8e:36:11:72:ed:33:13:b5:
40:e2:61:27:8c:f7:4a:bf:5e:04:01:cc:f9:c2:45:e4:d4:2f:
ef:67:25:3e:ce:b7:28:32:89:3d:c1:36:22:d2:ac:a5:2c:d2:
6d:89:4b:1a:ca:17:28:da:e5:b4:9b:52:1a:e2:36:7d:e7:53:
fa:1f:8e:93:5b:57:3c:7f:2d:37:6d:fa:7a:92:66:b6:6e:9c:
22:55:f1:4b:5a:61:ad:dc:8c:e3:8b:5d:fb:af:f9:a2:d6:e6:
8a:82:34:7b:59:2a:cc:a7:92:bf:89:bd:c5:d4:48:5b:2e:6d:
3d:11:c4:52:0f:20:66:58:dc:b3:c3:ad:a2:1a:a1:0f:6a:e6:
8e:39:40:7d:38:8a:5f:30:88:4f:c4:c2:11:36:2e:a9:15:5b:
07:78:7b:d6:87:74:e8:a8:f6:62:c5:26:ad:ea:dd:b0:f5:3f:
09:c0:65:fb:da:7b:66:25:90:b4:40:23:55:6c:f0:49:8f:a1:
9f:3a:b3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 18:55:50 2026 by rpki-client